topic Enable password issue on ASA in Network Security https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553159#M615944 <P>Hi,</P><P></P><P>One of my customer is having problem to login to the ASA at the privilege mode, He has access through ASDM. He has changed the enable password through ASDM but no luck.&nbsp; Here is the config:</P><P></P><P>aaa authentication ssh console Radius LOCAL<BR />aaa authentication enable console Radius LOCAL<BR />aaa authentication http console Radius LOCAL<BR />aaa accounting enable console Radius</P><P>aaa accounting ssh console Radius</P><P></P><P>He tried by disabling the Radius server to login local but didn't work. Anybody has any idea?</P><P></P><P>Thanks.</P> Mon, 11 Mar 2019 19:11:59 GMT rmrahman0302 2019-03-11T19:11:59Z Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553159#M615944 <P>Hi,</P><P></P><P>One of my customer is having problem to login to the ASA at the privilege mode, He has access through ASDM. He has changed the enable password through ASDM but no luck.&nbsp; Here is the config:</P><P></P><P>aaa authentication ssh console Radius LOCAL<BR />aaa authentication enable console Radius LOCAL<BR />aaa authentication http console Radius LOCAL<BR />aaa accounting enable console Radius</P><P>aaa accounting ssh console Radius</P><P></P><P>He tried by disabling the Radius server to login local but didn't work. Anybody has any idea?</P><P></P><P>Thanks.</P> Mon, 11 Mar 2019 19:11:59 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553159#M615944 rmrahman0302 2019-03-11T19:11:59Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553160#M615949 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>If you remove this command can you log in?</P><P></P><P>no aaa authentication enable console Radius LOCAL</P><P></P><P>It's going to ask Radius authentication for the enable password when connected via the console, so can you try to remove the command via a telnet/SSH session?</P><P></P><P>Federico.</P></BODY></HTML> Fri, 19 Nov 2010 18:53:40 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553160#M615949 Federico Coto Fajardo 2010-11-19T18:53:40Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553161#M615953 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I guess he didn't test that by removing the command. But the problem is that he doesn't have privilege level access via&nbsp; SSH or Telnet.</P></BODY></HTML> Fri, 19 Nov 2010 19:26:47 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553161#M615953 rmrahman0302 2010-11-19T19:26:47Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553162#M615955 <HTML><HEAD></HEAD><BODY><P>Does he have access to the CLI of the ASA at this moment? Or it's locked out the privilege mode?</P><P></P><P>Federico.</P></BODY></HTML> Fri, 19 Nov 2010 20:42:12 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553162#M615955 Federico Coto Fajardo 2010-11-19T20:42:12Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553163#M615958 <HTML><HEAD></HEAD><BODY><P><SPAN style="background-color: #f8fafd;">He doesn't have privilege level access through the CLI .</SPAN></P></BODY></HTML> Fri, 19 Nov 2010 20:52:52 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553163#M615958 rmrahman0302 2010-11-19T20:52:52Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553164#M615960 <HTML><HEAD></HEAD><BODY><P>Has the configuration already been saved to flash?</P><P>If not... could reload the ASA to log in...</P><P></P><P>Another option is to disable the authentication method against the Radius via ASDM and do a password recovery on the ASA via rommon mode.</P><P></P><P>Federico.</P></BODY></HTML> Fri, 19 Nov 2010 20:56:45 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553164#M615960 Federico Coto Fajardo 2010-11-19T20:56:45Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553165#M615963 <HTML><HEAD></HEAD><BODY><P>Thanks for your reply. It is already saved. May be he can bypass Radius server and use local database:</P><P></P><P>aaa authentication enable console&nbsp; LOCAL</P><P>aaa accounting enable console LOCAL</P></BODY></HTML> Fri, 19 Nov 2010 21:03:41 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553165#M615963 rmrahman0302 2010-11-19T21:03:41Z Re: Enable password issue on ASA https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553166#M615965 <HTML><HEAD></HEAD><BODY><P>Yes, can you try that and post the result?</P><P></P><P>Federico.</P></BODY></HTML> Fri, 19 Nov 2010 21:17:33 GMT https://community.cisco.com/t5/network-security/enable-password-issue-on-asa/m-p/1553166#M615965 Federico Coto Fajardo 2010-11-19T21:17:33Z